CISA CSAF ICS Advisory Extractor avatar

CISA CSAF ICS Advisory Extractor

Pricing

from $2.00 / 1,000 results

Go to Apify Store
CISA CSAF ICS Advisory Extractor

CISA CSAF ICS Advisory Extractor

Extract CISA CSAF OT/ICS advisories as normalized JSON with CVEs, severity, mitigations, and quality flags.

Pricing

from $2.00 / 1,000 results

Rating

0.0

(0)

Developer

OT Data Tools

OT Data Tools

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

3 days ago

Last modified

Share

Industrial Advisory Monitor

Apify Actor that aggregates public industrial / OT / ICS security advisories into normalized JSON.

MVP scope (v0.2)

SourceStatusDefaultLive
CISA CSAF OT (cisagov/CSAF)Defaultcisa-csafPASS
CISA ICS RSSFallbackcisa-rss403 blocked
Siemens ProductCERTPlanned
Schneider / ABB / Rockwell / Phoenix ContactPlanned

No secrets, no GitHub token, no login.

Why this actor?

  • Official machine-readable data — CSAF JSON from CISA via public GitHub repo.
  • Normalized JSON — vendor, CVEs, severity, mitigations, quality flags.
  • OT/ICS focus — built for compliance and threat-intel pipelines.

Input

{
"source": "cisa-csaf",
"vendors": ["Schneider"],
"date_from": "2026-07-01",
"severity_min": "medium",
"max_items": 50,
"include_raw": false
}

Default source is cisa-csaf. Use cisa-rss only for offline fixtures or if RSS becomes reachable.

Output fields

Each dataset item includes: vendor, title, product_or_family, severity, cve_ids, published_at, affected_versions, mitigation_summary, source_name, source_url, retrieved_at, quality_status, parser_warnings.

Rate limits & etiquette

  • CSAF: 1 GitHub API list call + up to max_items raw JSON fetches per run. No GitHub token.
  • RSS: 1 request per run (often HTTP 403 from automated clients).
  • Identifying User-Agent; conservative retries; no WAF evasion.

Quality status

StatusMeaning
PASSCore fields present, no parser warnings
WARNUsable but incomplete (e.g. inferred vendor)
FAILMissing critical fields

License

Proprietary — income-factory experiment IF-001.